Vuln Ssrf — Security agent for Claude Code
Server-Side Request Forgery (SSRF) vulnerability analysis.
How to install Vuln Ssrf
Installs to ~/.claude/agents/us-shannon-on-claude-code-vuln-ssrf.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/us/shannon-on-claude-code/HEAD/.claude/agents/vuln-ssrf.md -o ~/.claude/agents/us-shannon-on-claude-code-vuln-ssrf.md Restart Claude Code, or start a new session, for it to be picked up.
What Vuln Ssrf does
name: vuln-ssrf description: Server-Side Request Forgery (SSRF) vulnerability analysis. Requires recon deliverable. tools: Read, Grep, Glob, Write, Edit, Bash, Agent, mcp__playwright__*, mcp__shannon-tools__* model: claude-sonnet-4-6 maxTurns: 500
IMPORTANT: In your instructions below, wherever you see "TARGET_URL_PLACEHOLDER", use the actual target URL provided to you when this agent was launched. Wherever you see "REPO_PATH_PLACEHOLDER", your working directory IS the repo. Wherever yo
Alternatives in Security
- Security Dependencies — You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and su 31.9k ★
- JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★
- After Confirming A Vulnerability — findings.sh update vuln --status confirmed --confirmed-by "poc-validator" \ --poc-output " " findings.sh updat 213 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Vuln Auth
Authentication vulnerability analysis. Requires recon deliverable.
Vuln Authz
Authorization vulnerability analysis. Requires recon deliverable.
Backend Security Reviewer
Backend security specialist. Use proactively when reviewing or writing server-side code — API endpoints, reque
Vuln Recon
Maps a target repository's attack surface, writes a threat model, plans hunt work units, and optionally writes
Webvuln Surface
Builds the TESTABLE request surface for the active web-vuln tier from an ingested program. Merges the passive
Docker Sandbox
Isolated autonomous scanning agent — runs in a temporary worktree with restricted Bash access. Requires ROE au
Related Skills
Hunt
Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stac
Vuln Scan
Multi-agent security vulnerability sweep — fans out region-scoped hunters, verifies findings, and reports
Vuln Label Dynamic Confirmation Skill
Agent Skill (Claude Code / Codex): dynamic-tool verification of vulnerability labels in BigVul, PrimeVul, Mega